Lucene search
K

1128 matches found

CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /contactus.php. An attacker can exploit this vulnerability to execute...

9.8CVSS8.1AI score0.00204EPSS
Exploits1References5
CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

Auto Taxi Stand Management System SQL Injection Vulnerability

Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter searchdata. An attacker can exploit this vulnerability ...

9.8CVSS8.1AI score0.00277EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

Complaint Management System SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter fromdate/todate in the file /admin/between-date-complaintreport.php...

8.8CVSS8.2AI score0.00268EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.2 views

WordPress Ultimate Gift Cards for WooCommerce plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Ultimate Gift Cards for WooCommerce plugin suffers from an SQL injection vulnerability that stems from the application's lack of validation of externally entered S...

4.9CVSS8.1AI score0.00256EPSS
Exploits0References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.2 views

Curfew e-Pass Management System /admin/edit-category-detail.php File SQL Injection Vulnerability

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter editid in the file /admin/edit-category-detail.ph...

9.8CVSS8.3AI score0.00204EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

Rail Pass Management System /download-pass.php File SQL Injection Vulnerability

Rail Pass Management System is a rail pass management system. The Rail Pass Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /download-pass.php. An attacker can...

9.8CVSS8.3AI score0.00291EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/06/09 12:0 a.m.1 views

Code-Projects Chat System 注入漏洞

Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cid in the file /user/confirmpassword.php. An attacker can exploit this vulnerability to execute illegal SQL...

9.8CVSS8.2AI score0.00197EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.1 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. The Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter noc in the /user/register-complaint.ph file. An attacker can exploit...

8.8CVSS8.1AI score0.00268EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.1 views

PHPGurukul Medical Card Generation System 安全漏洞

Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the /admin/unreadenq.ph file. An attacker can...

8.8CVSS8.1AI score0.00268EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.2 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the /user/profile.php file parameter pincode. An attacker can exploit this...

8.8CVSS8.2AI score0.00268EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/04 12:0 a.m.1 views

PHPGurukul Dairy Farm Shop Management System 安全漏洞

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter productname in the file...

9.8CVSS8.1AI score0.00204EPSS
Exploits1References5
CNVD
CNVD
added 2025/05/30 12:0 a.m.2 views

Student Record System /login.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /login.php. An attacker can exploit this vulnerability to execute...

9.8CVSS8.2AI score0.00204EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/28 12:0 a.m.0 views

Campcodes Online Shopping Portal SQL Injection Vulnerability

CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. Campcodes Online Shopping Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements for the parameter Category in the file /admin/category.php. An...

9.8CVSS8.1AI score0.00277EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:14 a.m.4 views

CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...

6.5CVSS7.8AI score0.00387EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:38 a.m.5 views

CVE-2022-40839

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

7.5CVSS8AI score0.02334EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/22 12:0 a.m.1 views

CampCodes Sales and Inventory System /pages/purchase_add.php File SQL Injection Vulnerability

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. The CampCodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from a lack of validation of the parameter ID in the file /pages/purchaseadd.php for externally entered SQL...

9.8CVSS8.1AI score0.00277EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/22 12:0 a.m.1 views

CampCodes Sales and Inventory System /pages/ci_update.php File SQL Injection Vulnerability

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. The CampCodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from a lack of validation of an externally entered SQL statement in the parameter Name in the file...

9.8CVSS8.1AI score0.00204EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/22 12:0 a.m.1 views

Daily Expense Tracker System SQL Injection Vulnerability (CNVD-2025-30999)

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. The Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the fromdate/todate parameter of file...

9.8CVSS8.3AI score0.00277EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/18 12:0 a.m.1 views

CampCodes Online Shopping Portal 注入漏洞

CampCodes Online Shopping Portal is an online shopping portal from CampCodes, Inc. Campcodes Online Shopping Portal suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter email in the file /forgot-password.php. An...

9.8CVSS8.2AI score0.00204EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/05/10 12:0 a.m.2 views

PHPGurukul e-Diary Management System 注入漏洞

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file /manage-notes.php. An attacker can...

9.8CVSS8.2AI score0.00204EPSS
Exploits1References6
Rows per page
Query Builder